Re: [dane] [openpgp] The DANE draft

Carsten Strotmann <carsten@strotmann.de> Thu, 06 August 2015 10:04 UTC

Return-Path: <carsten@strotmann.de>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA5911B2BEB for <dane@ietfa.amsl.com>; Thu, 6 Aug 2015 03:04:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.96
X-Spam-Level:
X-Spam-Status: No, score=-0.96 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, J_CHICKENPOX_46=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U73azMZPi1KO for <dane@ietfa.amsl.com>; Thu, 6 Aug 2015 03:04:28 -0700 (PDT)
Received: from smtp3.strotmann.de (smtp3.strotmann.de [46.38.233.133]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 237551B2BEE for <dane@ietf.org>; Thu, 6 Aug 2015 03:04:28 -0700 (PDT)
Received: from debian01.home.strotmann.de (unknown [IPv6:2a01:198:2b6:1000:240:caff:fea0:83b3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp3.strotmann.de (Postfix) with ESMTPS id B721C7FD05 for <dane@ietf.org>; Thu, 6 Aug 2015 12:04:01 +0200 (CEST)
Received: from MacMini3-2.local (unknown [IPv6:2a01:198:2b6:0:e07b:1eb3:387a:f24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by debian01.home.strotmann.de (Postfix) with ESMTPSA id E6DD920005C for <dane@ietf.org>; Thu, 6 Aug 2015 12:03:59 +0200 (CEST)
To: dane@ietf.org
References: <CAMm+LwhYdBLXM8Td8q8SCnzgwywRgMx3wNKeS_Q0JSN4Lh7rZQ@mail.gmail.com> <87bnf1hair.fsf@alice.fifthhorseman.net> <alpine.LFD.2.11.1507250832510.854@bofh.nohats.ca> <87bnem2xjq.fsf@alice.fifthhorseman.net> <alpine.LFD.2.11.1508050331340.1451@bofh.nohats.ca> <55C1F35A.5070904@cs.tcd.ie> <B7419740-25C9-4F8D-85AE-FC6E11BCC038@vpnc.org> <55C22D64.9080507@strotmann.de> <alpine.LFD.2.11.1508060417450.16408@bofh.nohats.ca> <55C32FBA.8080604@cs.tcd.ie>
From: Carsten Strotmann <carsten@strotmann.de>
Message-ID: <55C3310C.9050601@strotmann.de>
Date: Thu, 06 Aug 2015 12:03:56 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.1.0
MIME-Version: 1.0
In-Reply-To: <55C32FBA.8080604@cs.tcd.ie>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/zAqXgPbxTH8diSubbdnATK3D3Ok>
Subject: Re: [dane] [openpgp] The DANE draft
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Aug 2015 10:04:29 -0000

Hi Stephen,

On 06/08/15 11:58 PM, Stephen Farrell wrote:
>> > I might agree but I think the gain for this is so incredibly small, that
>> > I think the gain for use of online signers plus email address
>> > corrections by the smtp+dnssec combined server is actually a more likely
>> > and minorly useful thing to have.
> Can you point me at a DNS server (or real specification for one)
> that generates responses in any similar fashion? I'm not aware of
> any that actually do, (even if they could do), but that my just be
> my ignorance.

PowerDNS with a remote backend could do this, but it would require some
glue code to be written by the admin to be able to talk to the smtp-server.

I can evision such an installation for a few large mail providers, but
not for the majority of mail server installations.

Carsten